aboutsummaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAge
* Add profile for offical Linux Teams application (#3152)Libravatar Andreas Hunkeler2020-02-22
| | | | | | | | | | | | | | | | | | | | | | | | * Add profile for offical Linux Teams application * fix: add mkdir suggestions in Teams profile * Merge suggestions for Teams profile * Add suggestion to Teams profile * Add Teams to firecfg.config * Add paths from Teams profile to disable-programs * Remove the duplicated whitelist for downloads in Teams profile Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com> * Cleanup teams profile after testing * Add comment to Teams profile Co-authored-by: rusty-snake <print_hello_world+GitHub@protonmail.com>
* Allow exec from /usr/libexec & co. with AppArmorLibravatar Quentin Minster2020-02-22
|
* Whitelist more /usr/share for okular and othersLibravatar Antonio Russo2020-02-17
| | | | | | | | | Some distributions include fonts in the texmf and texlive subdirectories of /usr/share. This makes those fonts accessible, addressing buggy behavior in okular where some text fails to render. This also whitelists /usr/share/config.kcfg which contains default settings that should be available to many applications.
* apparmor: minor enhancementsLibravatar Vincent432020-02-15
| | | Allow writing some proc paths used by browsers but restrict it to their owner.
* allow networking in openshot.profileLibravatar glitsj162020-02-13
| | | Openshot 2.5.0 needs networking. This fixes #3221.
* added by included profileLibravatar rusty-snake2020-02-10
|
* harden subdownloaderLibravatar rusty-snake2020-02-10
|
* firecfg notes in profilesLibravatar rusty-snake2020-02-10
|
* Add a lot of profilesLibravatar rusty-snake2020-02-10
|
* improve baloo hardening suggestionLibravatar smitsohu2020-02-09
|
* harden wineLibravatar smitsohu2020-02-09
|
* simplescreenrecorder.profileLibravatar rusty-snake2020-02-09
| | | | | - mdwe broken - ${HOME}/.ssr
* include wvc to more profiles (#3209)Libravatar glitsj162020-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * include wvc in aria2c.profile * include wvc in clawsker.profile * include wvc in conky.profile * include wvc in dconf.profile * include wvc in dconf-editor.profile * include wvc in exiftool.profile * include wvc in font-manager.profile * include wvc in gconf.profile * include wvc in git.profile * include wvc in gjs.profile * include wvc in gpg.profile * include wvc in img2txt.profile * include wvc in mediainfo.profile * include wvc in mpd.profile * include wvc in nitroshare.profile * include wvc in ocenaudio.profile * include wvc to ping.profile * include wvc in simple-scan.profile * include wvc in simplescreenrecorder.profile * include wvc in sysprof.profile * include wvc in tshark.profile * include wvc in uget-gtk.profile * include wvc in viewnior.profile * include wvc in weechat.profile
* harden makepkg.profileLibravatar glitsj162020-02-08
|
* fix video play in liferea.profileLibravatar glitsj162020-02-08
|
* fix includes in mencoder.profileLibravatar glitsj162020-02-08
|
* harden mencoder.profileLibravatar glitsj162020-02-08
|
* harden gpg-agent.profileLibravatar glitsj162020-02-08
|
* refactor gnome-keyring.profile as whitelistLibravatar glitsj162020-02-07
|
* refactor geekbench.profile as whitelistLibravatar glitsj162020-02-07
|
* fix preview functionality in subdownloader.profileLibravatar glitsj162020-02-07
|
* Fixing the bug in 189772034b211578aca59540d7277f45da4f45d2 breaking meldLibravatar KOLANICH2020-02-07
|
* revert #3178Libravatar glitsj162020-02-03
| | | It is still undecided what causes #2681 for the OP. Let's not change the seccomp filter for everyone until we have reproducible issues.
* Add gnome-hexgl.profileLibravatar rusty-snake2020-02-03
|
* fix gnome-passwordsafe -- no whitelist globing yetLibravatar rusty-snake2020-02-03
|
* housekeeping: strip unneeded whitespaceLibravatar Fred Barclay2020-02-01
|
* profiles: whitelist /usr/share/doc in some profilesLibravatar Reiner Herrmann2020-01-31
|
* Add a profile alias for multimc5Libravatar Tad2020-01-30
|
* add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | Thanks to @rusty-snake for his comment in #3198.
* add /usr/share/file to wuscLibravatar glitsj162020-01-30
| | | Thanks to @rusty-snake for suggesting to move /usr/share/file to wusc in #3198.
* fix wusc in nano.profileLibravatar glitsj162020-01-30
| | | This fixes #3198.
* fix spelling in disable-common.incLibravatar glitsj162020-01-29
|
* Add profiles for the WPS-OfficeLibravatar rusty-snake2020-01-29
|
* fix private-lib for Gentoo in unf.profileLibravatar glitsj162020-01-29
| | | Thanks to @s-hamman for reporting this in the comments of #3193.
* fix private-lib for Gentoo in geekbench.profileLibravatar glitsj162020-01-29
| | | Thanks to @s-hamman for reporting this in the comments of #3193.
* fix private-lib for Gentoo in zathura.profileLibravatar glitsj162020-01-29
|
* noblacklist user cacheLibravatar glitsj162020-01-29
| | | Thanks to @rusty-snake's comment in https://github.com/netblue30/firejail/pull/3159.
* fix ordering in ${HOME}/.cache section and add gummi entree there tooLibravatar glitsj162020-01-29
|
* gedit: comment private-libLibravatar rusty-snake2020-01-29
|
* fix missing global include documentation (#3195)Libravatar Florian Begusch2020-01-29
|
* Add profiles for common (la)tex commands and a latex editor (#3159)Libravatar Florian Begusch2020-01-29
|
* disable private-lib in zathura.profileLibravatar glitsj162020-01-29
| | | Thanks to https://github.com/s-hamann for helping to harden the zathura profile.
* updates for zathura.profile (#3193)Libravatar glitsj162020-01-29
| | | | | | | | * move mkdir in zathura.profile * harden zathura.profile * fix private-lib in zathura.profile
* Update zathura.profileLibravatar rusty-snake2020-01-28
|
* clarify dropping python2 support in meld.profile (#3167)Libravatar glitsj162020-01-27
| | | | | | * clarify dropping python2 support in meld.profile * properly comment the python2 situation in meld
* Update whois.profile (#3154)Libravatar Amin Vakil2020-01-27
| | | | | | | | | | | | | | * Update whois.profile More details in https://github.com/netblue30/firejail/issues/3153 * Update etc/whois.profile private-etc Alphabetic order Co-Authored-By: rusty-snake <print_hello_world+GitHub@protonmail.com> Co-authored-by: rusty-snake <print_hello_world+GitHub@protonmail.com>
* Merge pull request #3149 from GovanifY/masterLibravatar netblue302020-01-27
|\ | | | | Blacklisting openrc paths by defaults
| * tighten info gathering for openrcLibravatar Gauvain "GovanifY" Roussel-Tarbouriech2020-01-15
| |
* | fixup! refactor some profiles as electron redirects (#3188)Libravatar rusty-snake2020-01-27
| | | | | | | | | | | | - move ignores to top - add remove netlink protocol from whalebird - ignore caps.drop all in wire-desktop
* | refactor some profiles as electron redirects (#3188)Libravatar glitsj162020-01-26
| | | | | | | | | | | | | | | | * refactor as electron redirect * refactor as electron redirect * refactor as electron redirect
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-09-02 18:34:33 +0000